# Skill Audit MCP

> Use this tool when you need to identify security vulnerabilities in MCP server code, AI agent skills, and plugins. The Skill Audit MCP detects various attack patterns, including credential exfiltration and code execution, and provides severity levels to help prioritize remediation. It is ideal for use cases requiring static security scanning with zero dependencies, making it a valuable asset for securing AI-powered systems.

Canonical page: https://skillsregistry.net/skills/eltociear-skill-audit-mcp  
JSON: https://api.skillsregistry.net/v1/skills/eltociear-skill-audit-mcp

## Description

Static security scanner for MCP server code, AI agent skills, and plugins. Detects 61 attack patterns across 4 severity levels — credential exfiltration, prompt injection, code execution, seed phrase harvesting, auth bypass, path traversal — with zero dependencies and 68+ real CVEs found in the wild.

## Trust

- **Trust score (0–1):** 0.60
- **Verification tier:** unverified

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** ai-ml
- **Updated:** 2026-05-03

## Source

- **Source listing:** [Glama](https://glama.ai/mcp/servers/s3ad6rkxa5)
- **Repository:** <https://github.com/eltociear/skill-audit-mcp>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "eltociear-skill-audit-mcp"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/eltociear-skill-audit-mcp` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/eltociear-skill-audit-mcp/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt